Major Data Breach Exposes Over 1 Million Passport and ID Documents in Hotel Check-In System A significant security failure at Tabiq, a digital hotel check-in platform operated by Japan-based startup Reqrea, exposed over one million sensitive identity documents online without password protection. The breach, uncovered by independent security researcher Anurag Sen, revealed unsecured Amazon cloud storage containing passports, driver’s licenses, and facial verification selfies from hotel guests worldwide. The exposed data used by hotels across Japan for contactless check-ins included names, addresses, dates of birth, passport numbers, and photographs, raising serious risks of identity theft and fraud. While the company secured the database after being alerted, it remains unclear how long the files were exposed or whether unauthorized parties accessed them. The incident highlights persistent vulnerabilities in improperly configured cloud storage, a recurring issue in cybersecurity. It also underscores growing concerns over facial recognition and digital identity systems in hospitality, as hotels increasingly adopt automated verification processes. This breach arrives amid heightened scrutiny of companies handling personal identity documents, particularly as digital verification expands globally.